Privacy Policy

What Repot stores on your device

Repot is a local-first plant-care and vermicomposting app. Everything you create — plant records, watering and feeding logs, photos, notes, tasks, worm-bin entries, and your collection history — is stored locally on your iPhone or iPad in the device's built-in SQLite database and private app file storage.

• Plant & care data — stored in a local database on your device.
• Photos — stored in the app's private container on your device. They are not saved to your Camera Roll unless you choose to save them.
• Anthropic API key (optional) — if you use "bring your own key" AI, your key is stored in the iOS Keychain, encrypted at rest, excluded from iCloud backups, and sent only to Anthropic when you trigger an AI feature.
• A random device identifier (only if you use Repot Cloud AI) — a randomly generated ID, created once and kept in the iOS Keychain, used solely to count the AI credits you've used. It is not your name, email, Apple ID, or advertising ID, and is never linked to your identity. See "AI features," below.
• Self-hosted server URL (optional) — if you point Repot at your own computer or home server, that URL is stored locally and used only to reach your own machine.

AI features (all optional)

Repot's AI helpers — plant identification, health checkups, plant valuation, pest and disease diagnosis, and the plant catalog's suggestions — are entirely optional. Every core feature (tracking, watering schedules, the daily round, photo timelines, worm bins, the offline encyclopedia) works with no AI and no network connection. AI runs only when you tap an AI button, and only after you accept an in-app consent screen that names the company your data will go to. You can choose one of three AI modes in Settings:

• Repot Cloud (managed). Your photo and the relevant plant details (species, notes, care history, and similar) are sent over HTTPS to Repot's cloud service, which forwards them to Google's Gemini AI to produce the result, and returns it to your device. To meter the AI credits included with your purchase, requests carry a random per-device identifier (described above) and a flag indicating whether you've unlocked the app. This identifier is used only to track your remaining credit balance; it is not linked to your name, email, or Apple ID, is not used for advertising or tracking, and is not sold or shared. Repot's service does not retain your photos or plant notes to build a profile of you. Google's handling of data it processes is governed by Google's Privacy Policy.
• Bring your own key (BYOK). Your photo and the relevant plant details are sent directly from your device to Anthropic's Claude API using your own Anthropic API key. Nothing passes through Repot's servers, and the developer never receives this data. Some AI features let Claude perform a web search to ground its answer, which can include the relevant plant details in that search. Anthropic's handling of this data is governed by Anthropic's Privacy Policy.
• Self-hosted (advanced). If you run your own copy of Repot's server on your own computer, AI requests go to your own machine only. No third-party cloud is involved beyond whatever AI provider you configure on that machine.

Importing from Planta (optional)

If you choose Settings → Import plants → From Planta and paste your own one-time Planta code, Repot sends that code to Planta's public API to fetch your own plant list and download your own plant photos so they can be added to your Repot collection. This happens only when you start an import with your own code. Nothing is sent to Repot's servers, and the developer never receives this data. Planta's handling of your data is governed by Planta's own privacy policy.

Purchases

Repot is free to download. It offers optional in-app purchases — a one-time unlock and, where available, consumable packs of AI credits — with no subscription of any kind. All purchases are processed by Apple through the App Store. Repot never sees, collects, or stores your payment card, billing address, or Apple ID.

When you make a purchase, Apple provides Repot with a receipt confirming it so the app can unlock the corresponding feature or add AI credits. Your unlock entitlement is stored on your device, and — for AI features that use Repot Cloud — your entitlement and credit balance are associated with the random per-device identifier described above, so the service can meter the credits you paid for. This is not linked to your name, email, or Apple ID. Purchases are subject to Apple's Privacy Policy and the App Store terms; refunds and purchase history are handled by Apple. Repot does not use purchases for advertising and does not share purchase information with third parties beyond what is technically necessary to deliver what you bought (verifying a purchase with Apple, and metering AI credits through Repot's cloud service).

No ads, no tracking, no analytics

Repot contains no advertising, no third-party analytics, no crash-reporting SDK, and no tracking of any kind. We don't use Firebase, Mixpanel, Amplitude, Google Analytics, or any similar service, and we don't track you across other apps or websites. There is no App Tracking Transparency prompt because there is nothing to track.

iCloud & device backups

Your plant database and photos are stored where standard iOS backups (iCloud Backup and Finder/iTunes local backups) can include them, so your data is backed up alongside the rest of your device. Your Anthropic API key is explicitly excluded from backups (kept in the Keychain with the non-migratable flag).

Children

Repot is rated 4+ and is not directed at children. It does not knowingly collect personal data from anyone, including children under 13.

Changes to this policy

If a future update changes how data is handled, this page and the "Last updated" date will be revised, and material changes will be noted in the App Store release notes.

This website (therepotapp.com)

The same philosophy applies to this site. The landing page uses Vercel Web Analytics — a cookieless, privacy-friendly counter that reports aggregate visits. It sets no cookies and does no cross-site tracking, and there is no advertising or ad tech anywhere on the site.

This privacy page and the help page load no analytics at all — no trackers, no cookies, and no third-party resources. The only code that runs on them is a small first-party script for the theme toggle and the menu. Fonts and images across the site are self-hosted.

Contact

Questions? Email setheggerrocks@gmail.com.